- cross-posted to:
- [email protected]
- cross-posted to:
- [email protected]
FYI admins
cross-posted from: https://quokk.au/c/fediverse/p/1066667/tesseract-dev-injects-malicious-code-into-browser-to-illegally-ddos-the-dbzer0-instance
As part of the devs farewell message on their site, they have included malicious code to make each visitor sends 2,000 requests to the dbzer0 servers in an attempt to DDOS and take the instance offline.
dubvee.org is down
what does dubvee.org have to do w it?
That’s where the ddos originated
@[email protected] is Tesseract the default UI for db0? I see voyager, photon and alexandrite listed on the front page but no mention on tesseract.
No it isn’t. It’s still there but I removed the link to it
Thanks
“Tesseract dev found to have world’s smallest and most rancid penis.”
I’m confused. dubvee.org is down and the tesseract repo was also pulled. How is this being deployed? What instances are hosting this version of tesseract?
I would like to see this javascript myself because DDOSing with open source code in your name is a whole new level of unwise.
Also wtf is up with the
100 - 1 + 1expression? Is this some weird JavaScript quirk?Dubvee is down down now (server not responding), but prior to that the site had a really bitchy “farewell” message. The DDOS was embedded javascript code your browser would run when you visited dubvee.org and viewed the message.
Archive.org has a snapshot of it, but it still has that javascript embedded so I’m not going to link to it. Here’s a screenshot of the site when this code was included.

Also wtf is up with the 100 - 1 + 1 expression? Is this some weird JavaScript quirk?
If searching online for a JS random number generator code, something like
Math.floor(Math.random() * (max - min + 1) ) + min;is the most common result. If you’re lazy or don’t care, you just fill in theminandmaxand get that100 - 1 + 1I don’t think the DDoS code was FOSS. I think their frontpage index.html was set to a static html file just for the flounce.
This whole thing reminds me of the guy (Angled/LMAO) 3 years ago that was all butthurt after he got busted trying to take all the good sublemmy names, and responded by posting a bunch of disgusting stuff with alts and DOSing lemmy.world.
This was a blast from the past.
Isn’t that like seriously criminal in the usa lol?
Actual lmao
Your link 404s
Wow lmao. This is crazy levels of petty
It just gets worse and worse. I figured that the goodbye message he posted wouldn’t be the end of it. Thankfully it seems to be down now so it’s not causing harm anymore directly but still.
What the actual fuck? This idiot may have his braindead opinions and do to his OSS project whatever he wants (so sag I wasn’t on the list), but that is just such a fucked up thing to do.
Blegh. I made some effort to get to this instance and I’m not even on the list!
Im sure some shitlibs will still defend this
Where is @[email protected] when you need him most?
not convinced that’s not a sock puppet, from all the stuff I’ve seen so far
He kept claiming they’re AP, but refused to provide proof. Not sure but as it happens, startrek.website defederated us as soon as we banned him.
Huh, weird how the framing of the defedederation lines up so well to what ap and Kirk would say.
https://startrek.website/post/42709922
If you’re not familiar with how Lemmy/the Fediverse works, basically everything you read at StarTrek.website is hosted by us, even if the content originated elsewhere. That means we are responsible for everything here and we have to decide if we are comfortable boosting content from other instances.
If you’re curious, the final straw here was learning that db0 explicitly allows hosting discussions about hurting people, which needless to say goes against our instance values and we simply don’t have the manpower to moderate that volume of content incoming from their server to a degree that we feel meets our quality standards, which left defederating as the only viable option.
In keeping in line with past trends we’re announcing this because is is a larger instance and don’t want to leave any of the crew confused as to why something may be missing.
Startrek.website is probably also run by Admiral Patrick, or maybe he’s just someone with admin access there. Either way they seem like bad news, that site should definitely be avoided.
I don’t think I’ve heard anything positive about the instance so completely unsurprised by what they did AND how they were happy to blame db0 for everything while continuing darvo.
Only sad this comment didn’t federate before the post was locked
So this user of yours will also be banned for not following the instance values?
Specifically not following authenticity, ie saying they’re a different user but could be trying to increase the moderation you may need to do, and extremely disrespectful, unless that value only counts towards members of this instance.
This is being brought up specifically as while yes you are a small instance non of this apart from that user would bring traffic here you would need to moderate so it seems as if you are just doing this to cut off a large portion of the fediverse explicitly against principles those in star trek would be for.
What a loser. Tiny whiny loser.
Fabulous reaction time from db0 & team!
So who is this loser, I mean it’s a tiny whiny bit illegal what he did it seems…
Idk what this tesseract is and at this point I’m too afraid to ask
Thanks mate













